Published 20 October 2026
Microsoft has brought Copilot Notebooks to OneNote and the Microsoft 365 Copilot app, giving enterprises a persistent AI workspace that grounds responses in user-curated documents, chats, and files. The feature is now generally available for commercial Microsoft 365 Copilot users, but Australian organisations should look past the marketing and check the governance gaps before enabling it broadly.
Copilot Notebooks are AI-powered workspaces where Copilot answers questions using only the content you add to the notebook: Word documents, PowerPoint decks, Excel spreadsheets, PDFs, OneNote pages, Copilot chats, and links. Microsoft says this provides “contextual answers and insights” grounded in curated content rather than generic web results. An Audio Overview feature can generate a spoken summary of the notebook’s contents.
For context on why source-grounded AI matters, see the rogue AI agents incident tracker and our guide to AI cyber security threats.
How Microsoft is positioning it
In a March 2026 Microsoft Copilot Blog post, Microsoft announced general availability of a refreshed Copilot Notebooks experience across the Microsoft 365 Copilot app and OneNote. The update adds a three-column layout, an Overview page that summarises references and surfaces key themes, and “Quick create” options that turn notebook content into drafts, audio overviews, flash cards, and quizzes. Notebooks are also now shareable with teammates.
Microsoft’s stated intent is to move users away from one-off Copilot chats toward persistent project spaces. “Think of a notebook as a long-lived collaboration space where AI works with your information, not around it,” the company wrote.
Availability and requirements
Copilot Notebooks first appeared in OneNote for commercial customers in July 2025, requiring OneNote Windows app version 2504 (Build 18827.20128) or later, a Microsoft 365 Copilot license, and an active SharePoint or OneDrive license. At that time, Microsoft said Notebooks were “currently not available to Microsoft 365 Personal and Family subscribers.”
In November 2025, Microsoft expanded availability. According to the Microsoft 365 Blog, Copilot Notebooks became available to Microsoft 365 Personal, Family, and Premium subscribers in the Microsoft 365 Copilot app on the Web and in the OneNote app on Windows. For work or school accounts, Microsoft says Notebooks are available to users with a Microsoft 365 Copilot subscription and SharePoint or OneDrive storage.
Security and compliance realities
Microsoft positions Copilot Notebooks as an enterprise-grade feature. Microsoft’s privacy documentation states that Copilot Notebooks “doesn’t use user data to train the large language model” and that Copilot operates within existing Microsoft 365 permissions and access controls. The company cites compliance with GDPR, ISO, and SOC standards, and notes that audit logs are available and exportable through Microsoft Purview.
However, the governance picture is more nuanced. Microsoft’s own compliance summary for Copilot Notebooks lists several limitations that enterprises should not overlook:
- No end-user recycle bin. Neither administrators nor end users can recover individually deleted Copilot Notebooks.
- Information Barriers are not supported. If your organisation requires Information Barriers, Microsoft recommends disabling Copilot Notebooks entirely.
- Sensitivity labels are not applied to the notebook container. Copilot Notebooks share a container with Copilot Pages, and the container itself does not inherit sensitivity labels from underlying files.
- Conditional Access applies only at the app level, not to individual notebooks.
These are not bugs; they are documented product constraints. The question is whether your security and compliance teams have reviewed them.
Governance gaps enterprises should not ignore
Independent analysts have highlighted risks that go beyond Microsoft’s feature matrix. An m365.fm analysis argues that Copilot Notebooks can create a “Shadow Data Lake” because AI-generated summaries and drafts inherit none of the original sensitivity labels, retention policies, or audit traces of their source material. The result is derivative content that may be searchable, shareable, and retained outside normal governance boundaries.
This is not hypothetical. Our reporting on an AI agent that committed a data breach and triggered regulator notification shows how quickly autonomous AI actions can outpace governance frameworks.
Other concerns raised by practitioners include the lack of password protection on individual notebooks, the inability to add groups as members to a personal SharePoint Embedded container, and the fact that sharing a notebook can grant access to files inside it without explicit per-file permission reviews. Microsoft’s FAQ confirms that notebooks are stored in a personal SharePoint Embedded container that follows the creator’s lifecycle, and that anyone you invite to a notebook gets editing access.
How it compares to Google NotebookLM
For Australian teams already using Microsoft 365, Copilot Notebooks offers deeper integration with Teams, Outlook, and SharePoint than Google NotebookLM. Analyst Scott S. Nelson notes that Copilot Notebooks keeps content inside the Microsoft trust boundary, respecting existing permissions and compliance controls. He suggests using Copilot Notebooks when “keeping the secret sauce secret is important,” and NotebookLM for research that does not involve sensitive Microsoft Office files.
The trade-off is flexibility. NotebookLM supports web content, YouTube URLs, and a wider range of external sources, while Copilot Notebooks does not pull in live web content or run real-time internet searches. NotebookLM also offers more mature audio overview controls and collaboration features in its Pro tier.
What this means for Australian organisations
Australian enterprises, government agencies, and healthcare providers should treat Copilot Notebooks as a productivity tool with real governance conditions, not a default upgrade. Before enabling Notebooks broadly:
- Confirm that your Microsoft 365 Copilot license terms and data residency settings align with Australian Privacy Principle obligations and any sector-specific rules.
- Ask your compliance team to review the absence of an end-user recycle bin, Information Barriers, and container-level sensitivity labels. Australia’s cyber security framework rewrite is one place to align your AI governance baseline.
- Define a retention and lifecycle policy for notebooks before they accumulate project secrets.
- Limit initial rollout to pilot groups where Microsoft 365 security controls are already mature.
The AI workspace market is moving fast. Copilot Notebooks is a legitimate option for teams that need persistent, source-grounded AI inside Microsoft 365, but it is not a turnkey governance solution. The organisations that benefit most will be the ones that map its constraints to their own risk appetite before they start sharing notebooks.
Sources
Microsoft 365 Blog, Copilot Notebooks Now Available for Microsoft 365 Personal, Family, and Premium Accounts (18 Nov 2025) — supports availability expansion to consumer subscriptions and work/school requirements.
Microsoft 365 Blog, Introducing Copilot Notebooks: A whole new way to work with AI in OneNote (1 Jul 2025) — supports OneNote commercial availability, version/build requirements, and file-type limits.
Microsoft Copilot Blog, Meet the updated Copilot Notebooks experience (12 Mar 2026) — supports refreshed three-column layout, Overview page, Quick create options, sharing, and Audio Overview details.
Microsoft Learn, Summary of governance, lifecycle, and compliance capabilities for Copilot Pages and Copilot Notebooks (last updated 7 Jun 2026) — supports compliance status table, SharePoint Embedded storage, Information Barriers gap, no end-user recycle bin, sensitivity label limitations, Conditional Access scope, and audit log availability.
Microsoft Learn, Data, Privacy, and Security for Microsoft Copilot — supports data-residency, encryption, and training-data commitments.
m365.fm, The hidden governance risk in Copilot Notebooks — supports Shadow Data Lake analysis and derivative-insight governance concerns.
What IT Is — Scott S. Nelson, Organize AI Augmentation with Notebooks (30 Jun 2025) — supports comparative assessment with Google NotebookLM and enterprise use-case guidance.
How this analysis is researched, sourced and corrected: Editorial standards and corrections. Spotted an error? Contact Philip Hall.
